Privacy Policy

The provider identified in the details below is the operator and, where applicable, the personal data controller. This policy covers InterviewAssist.online, its dashboard, Chrome extension, and Windows application. Additional notices may appear when you enable a particular feature.

The data depends on the features you use. We may process:

We use data to create and secure accounts; synchronize interviews and settings across the website, application, and extension; transcribe speech, translate, generate suggestions and reports; process payments and support requests; prevent fraud, diagnose issues, and meet legal obligations.

Where required by applicable law, legal bases include performance of a contract and steps before entering one; your consent/permission to enable capture and data transmission; compliance with legal accounting duties; and our legitimate interest in protecting and operating the Service reliably, balanced against your rights. You may withdraw consent when processing is based on consent; this does not affect prior lawful processing.

With local Whisper, audio is processed on your device. If Deepgram Flux is selected, the audio stream is sent to Deepgram for transcription; Deepgram retention depends on its current policy and request configuration, so we do not promise zero retention unless the relevant request settings confirm it. Transcript text and necessary context may be sent through OpenRouter to the selected AI model or its provider to generate suggestions, translations, or feedback. Data retention and use depend on the specific model/provider: some may retain inputs or use them to improve models under their own rules.

You should review provider practices, consider the confidentiality of resumes and conversations, and not enable capture without required permission. We send only context needed for the requested feature, but transmission to an external provider means that provider processes the data.

Access is limited to staff and vendors who need data to operate the Service or provide support, under their role and agreements. The Service uses Supabase for accounts, database, and storage; Vercel for website hosting; Google for sign-in if you choose Google OAuth; OpenRouter and the models it routes to for AI features; Deepgram for streaming recognition when Flux is enabled; NOWPayments for crypto payments if that method is available and selected; and an email provider for service messages. The specific recipients depend on the feature and payment method.

A payment provider receives order identifiers and information you submit on its checkout or payment page. Providers also operate under their own privacy policies. We do not sell personal data or share it with advertising networks for targeted advertising. We may disclose data to public authorities in response to lawful requests.

Data available to the extension through Chrome APIs is used only for features you explicitly start: account connection, reading available captions/text from a supported call, showing suggestions and the answer database, and syncing the selected interview. We do not sell that data or use it for advertising, credit scoring, profiling unrelated to the extension feature, or determining payment eligibility. Server and AI-provider transmission occurs only to deliver the requested feature. Our practices follow the Chrome Web Store User Data Policy Limited Use requirements; this policy is available at the permanent /privacy URL.

Interview materials and answer databases remain in your account until you delete them or close the account, unless longer retention is needed by law, to resolve a dispute, or for security. Call history may be stored as part of a session journal; you can delete an individual session if the feature is available or request deletion through support. Payment and accounting records are retained as required by applicable rules. Technical logs are kept for a limited period needed for security and diagnostics; the period depends on the provider.

Vendors may process data in countries outside your country. We use contractual and technical measures available under vendor settings and agreements and required by applicable law. Access to operational systems is restricted; HTTPS, access controls, and infrastructure security measures are used. No transmission or storage method can guarantee absolute security.

You may request confirmation of processing, access to and a copy of data, correction, deletion or restriction, object to processing, and withdraw consent, as provided by applicable law. People in the EEA/UK may have rights under the GDPR, including data portability and the right to complain to a supervisory authority. Ukrainian users have rights under Ukrainian personal-data law.

Send your request to the contact email below from your account address and describe what you need. We may ask for reasonable identity verification and will respond within the time required by law. Some data cannot be deleted immediately when retention is required for financial records, fraud prevention, or legal claims; access to such data will be restricted.

The Service is not intended for children under 18. We use strictly necessary cookies and local storage for sign-in, security, and remembering language/settings. If optional analytics or advertising technologies are added, we will request consent where required.

If this policy materially changes, we will update its date and notify users through the website, account, or email when required by law. Continued use does not replace consent where consent is legally required.

Use the operator contact details below for privacy requests, complaints, and to exercise your rights.